Overview

overview

10

Static

static

1

7b6726d6af...26.exe

windows7-x64

10

7b6726d6af...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b6726d6af9d674d6b7d96808eb70d26

  • Size

    636KB

  • Sample

    240127-1zkqesdcc9

  • MD5

    7b6726d6af9d674d6b7d96808eb70d26

  • SHA1

    a352653f8026c0f823c4d8bc3bd1668dff1e1ed3

  • SHA256

    6d5428ce4be04184f9c2f89a6a1646bffc718818c7a0af019207bd81cced4d06

  • SHA512

    1028a0130d392b4b84b5c82b0f9d40cbba53f41c50a184aafb8c1c6c3a41a033196c57b3b213ab765fd6babe83c1f232ef070aca2cbd44c7ac95f0961958b5bd

  • SSDEEP

    12288:brFCG95RXgPtl4EqSaXbhJ1Xs3gnVZd3OOm9Fd/rL2qsdGWw/R2:brFfaPXPqS0hJ1XsQnVZNOT9F5mGWw/I

Score
10/10
raccoon92be0387873e54dd629b9bfa972c3a9a88e6726cstealer

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

92be0387873e54dd629b9bfa972c3a9a88e6726c

Attributes
  • url4cnc

    https://t.me/gishsunsetman

rc4.plain
rc4.plain

Targets

    • Target

      7b6726d6af9d674d6b7d96808eb70d26

    • Size

      636KB

    • MD5

      7b6726d6af9d674d6b7d96808eb70d26

    • SHA1

      a352653f8026c0f823c4d8bc3bd1668dff1e1ed3

    • SHA256

      6d5428ce4be04184f9c2f89a6a1646bffc718818c7a0af019207bd81cced4d06

    • SHA512

      1028a0130d392b4b84b5c82b0f9d40cbba53f41c50a184aafb8c1c6c3a41a033196c57b3b213ab765fd6babe83c1f232ef070aca2cbd44c7ac95f0961958b5bd

    • SSDEEP

      12288:brFCG95RXgPtl4EqSaXbhJ1Xs3gnVZd3OOm9Fd/rL2qsdGWw/R2:brFfaPXPqS0hJ1XsQnVZNOT9F5mGWw/I

    Score
    10/10
    raccoon92be0387873e54dd629b9bfa972c3a9a88e6726cstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks